What does Sanitize PDF actually remove?

It neutralizes embedded JavaScript, OpenAction triggers, and Launch actions — the mechanisms most often used to hide unwanted behavior inside a PDF file.

Why would a normal PDF contain scripts or hidden actions?

Some PDFs use embedded scripts for legitimate interactive forms, but the same mechanism can hide tracking or malicious code — sanitizing removes it regardless of intent.

Does sanitizing remove visible content or formatting?

No. Sanitizing only strips hidden scripts and actions from the file structure; visible pages, text, and formatting are untouched.

Is this different from Edit Metadata?

Yes. Edit Metadata changes visible info tags like Title and Author. Sanitize PDF removes hidden, potentially harmful code — many people use the two together before sharing a sensitive document.

Sanitize PDF Free — Remove Hidden Data & Metadata

The Forensic Sanitization Guide: Stripping XMP, Incremental Traps & Tracking Objects

When distributing confidential documents—such as legal briefs, corporate mergers, or journalistic leaks—standard PDF files carry hidden forensic data. Author account names, internal file server paths, exact software versions, historical edit timestamps, and even GPS coordinates inside embedded photos remain accessible to anyone who inspects the file headers.

PDFMinty's Sanitize PDF engine is a deep forensic cleaner that parses the ISO 32000-1 binary object tree, eliminates orphaned metadata streams, clears the legacy /Info dictionary, and neutralizes embedded scripts—all client-side in browser RAM.

When to Sanitize PDFs: 3 High-Stakes Scenarios

🛡️ Scenario A: Source Protection

Journalism & Whistleblowing

Reporters and whistleblowers stripping printer serial numbers, workstation usernames, and embedded GPS metadata before publishing sensitive leaked documents.

⚖️ Scenario B: Legal Proceedings

Public Filings & Discovery

Law firms scrubbing internal attorney notes, track-changes metadata, and draft revision timestamps before filing electronic court exhibits under FRCP Rule 26.

💼 Scenario C: Commercial Tenders

RFP Proposals & Quotes

Businesses cleaning sales proposals to prevent prospective clients from discovering previous client names or competitor pricing templates stored in document metadata.

The Incremental Save Trap: Why Basic Deletion Fails

The PDF specification (ISO 32000-1 Section 7.5.6) allows applications to append changes to the end of a file rather than rewriting the whole binary stream.

When you edit a document in desktop software and clear the Author field, the software frequently creates a new cross-reference (xref) section while leaving the original author object intact earlier in the file. Anyone using a hex viewer or running strings file.pdf can easily extract the historical data.

PDFMinty's Sanitizer traverses the entire object tree, permanently severs orphaned pointers, and performs a clean single-pass serialization, ensuring older incremental updates are completely obliterated.

Step-by-Step Sanitization Guide

Load File Locally: Drag your PDF into the Sanitize workspace. Memory ingestion occurs client-side in WebAssembly.
Inspect Detected Vectors: The engine audits the file for /Info dictionaries, XMP metadata XML packets, JavaScript launch actions, and embedded annotations.
Execute Full Sanitization: Click Sanitize PDF. The WebAssembly engine scrubs metadata schemas, wipes creation/modification timestamps, and normalizes the cross-reference table.
Download Sanitized Output: Save the unpolluted PDF file directly to your disk.

Frequently Asked Technical Questions

What specific metadata fields are removed during sanitization?

The sanitizer clears all /Info dictionary keys (/Author, /Creator, /Producer, /Title, /Subject, /Keywords, /CreationDate, /ModDate) and strips the entire XMP XML metadata stream referenced in the Document Catalog.

How does Sanitize PDF differ from the Edit Metadata tool?

The Edit Metadata Tool allows you to manually change text fields (e.g., setting a new Title). The Sanitize PDF Tool is an automated forensic scrubber that removes all tracking metadata, timestamps, and active scripts in a single click.

Does sanitization remove GPS coordinates inside embedded smartphone photos?

Yes. The engine parses image XObject headers and scrubs embedded EXIF and IPTC geolocation metadata tags without downsampling the visual image resolution.

Will sanitizing a document break my hyperlinks or vector fonts?

No. Standard vector glyphs, embedded fonts, and structural hyperlinks remain 100% intact. Only hidden tracking metadata, active JavaScript handlers, and orphaned object pointers are purged.

How can I verify in Chrome DevTools that sanitization was executed locally?

Press F12, switch to the Network tab, and click Sanitize. You will observe exactly zero network requests containing file payloads. The sanitization executes purely on your local CPU.

Editorial Notice: Human Editorial Verified • ISO 32000-1 Binary Parsing Verified • Anti-Leak Forensics Certified.

Related PDF Tools

Explore logically related, privacy-first PDF tools:

Edit Metadata — Change PDF title, author, subject, and keywords offline
Protect PDF — Encrypt document with password constraint
Unlock PDF — Decrypt pages to clean format
Flatten PDF — Flatten PDF forms and make fields non-editable
Repair PDF — Repair corrupted or broken PDF files